Zecurion Insight: Security lessons from the credit card industry.
Newsletter
|
|
|
Dear Colleague, A recent Ponemon Institute survey reveals that 6 out of 10 employees who quit or are asked to leave will steal data. The most common types of data stolen include e-mail lists, customer contact lists, and confidential and proprietary information the employee had access to. Less frequent (but more serious) offenses involve the theft of credit card information and employee records (including social security numbers) -- highly-sensitive information that can be sold to the highest bidder on Internet auction sites. The retail and financial sectors reached a defining moment in 2006 and formed the PCI Security Standards Council to create a set of security standards to protect credit card data. Four years later, the PCI Security Standards Council is highly influential and well-respected by many organizations outside the credit and debit card industry. Companies across all industries have chosen to adopt the PCI standards because, for the most part, the standards are not credit card data specific. Moreover, the PCI Council's 6 milestones provide multiple levels of protection. Standards cover implementation of IT security products, and implementation of procedures and practices to ensure that security products are properly used.
"Defend Your Data Against Internal Threats: We offer an in-depth look at the PCI Security Council's 6 milestones, and demonstrate how one retail bank used the PCI standards and Zecurion security software to achieve compliance with the Gramm–Leach–Bliley Act. The bank profiled in the white paper is Flushing Savings Bank, a conservative, regional bank with a limited IT budget and strong reputation to protect. Their move to online banking required an IT solution that was intelligent, frugal, and effective. Want to learn how they did it? Download a copy of this white paper at:
Be secure, Lisbi Abraham P.S. Feel free to contact me directly if you'd like to discuss how you can use Zecurion in your enterprise to prevent security breaches. Our business is security, so take it to heart that we |
|